PPTP Detection

The remote host is running a PPTP Point-to-Point Tunneling Protocol server. It allows users to set up a tunnel between their host and the network the remote host is attached to. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10622; scriptversion "1.26";...

Nortel CES (3DES version) offers false sense of security when using IPSEC

Short summary: Nortel Networks Contivity Extranet Switch CES has a weakness in it's IPSEC key exchange when using 3DES encryption. The 3DES encryption keys are encrypted using single DES during initial key exchange thus reducing cryptographic strength to 56-bit DES level. The weakness affects bot...

CVE-2001-0082

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets...

CVE-2001-0082

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets...

CVE-2001-0082

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled is affected by CVE-2001-0082. The issue allows remote attackers to bypass access restrictions by sending malformed, fragmented packets, enabling partial confidentiality, integrity, and availability impacts. The primary documents do not pr...

CVE-2000-0808

The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time s/key Password Authentication."...

CVE-2000-0809

Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service...

CVE-2000-0813

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers "FTP Bounce" via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass."...

CVE-2000-0804

The vulnerability CVE-2000-0804 affects Check Point VPN-1/FireWall-1 4.1 and earlier. It is caused by a flaw in handling fragmented TCP connection requests or reopening closed one-way connections, allowing remote attackers to bypass the directionality check (One-way Connection Enforcement Bypass)...

CVE-2000-0806

The CVE-2000-0806 issue affects Check Point VPN-1/FireWall-1 4.1 and earlier, specifically the inter-module authentication mechanism (FWA1). The vulnerability allows remote attackers to cause a denial of service via inter-module communications bypass. The root cause is a flaw in FWA1 authenticati...

CVE-2000-0809

The vulnerability CVE-2000-0809 is a buffer overflow in the GetKey routine of the inter-module communication protocol checker (Getkey) in Check Point VPN-1/FireWall-1 4.1 and earlier. This flaw allows remote attackers to crash the firewall daemon, leaving policy enforcement in place but potential...

CVE-2000-0813

Technical details about CVE-2000-0813 are not publicly provided in the connected documents you supplied. The materials do not specify affected products/versions beyond Check Point VPN-1/FireWall-1 4.1 and earlier, nor concrete remediation steps. Monitor for updates.

CVE-2000-0805

CVE-2000-0805 affects Check Point VPN-1/FireWall-1 4.1 and earlier. The issue is "Retransmission of Encapsulated Packets": any source can send specially encapsulated FWZ packets that bypass normal rule checks and anti-spoofing, effectively spoofing as a FWZ client. All versions prior to the relev...

CVE-2000-0807

The OPSEC Authentication Spoof issue (CVE-2000-0807) affects Check Point VPN-1/FireWall-1 prior to the patches described in the ISS/FireWall-1 vulnerability alert. The security hole arises in the OPSEC authentication mechanism, allowing a remote attacker to spoof authentication and gain access to...

CVE-2000-0808

CVE-2000-0808 affects Check Point VPN-1/FireWall-1 (4.1 and earlier). The S/Key inter-module authentication Brute Force Vulnerability allows remote attackers to bypass authentication by brute-forcing the secret key, potentially enabling access to protected assets. Impact aligns with partial confi...

CVE-2000-0805

Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."...

CVE-2000-0804

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."...

CVE-2000-0806

The inter-module authentication mechanism fwa1 in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."...

CVE-2000-0807

The OPSEC communications authentication mechanism fwn1 in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."...

Check Point VPN-1FireWall-1 4.1 SP2 - Blocked Port Bypass

Check Point VPN-1FireWall-1 4.1 SP2 - Blocked Port Bypass / Summary A vulnerability exists in Check Point VPN-1/FireWall-1 4.1 SP2 that enables an attacker to establish connections to blocked TCP services through the firewall in certain configurations. We expect many deployed FireWall-1...